$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft File: 9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json) Hash identifier: n5QZOyWyF4uMLu8Bw9FQPgafyPT+CWnzeJXyAtGki94= Subject key identifier: CE:59:BB:2A:F1:81:FB:31:C8:A9:D2:CC:BC:99:F5:BF:57:00:20:1D Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 019E1D907FB890B40C70FDEA8FE57C298A64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft Manifest number: 160B Signing time: Tue 12 May 2026 19:01:09 +0000 Manifest this update: Tue 12 May 2026 19:01:09 +0000 Manifest next update: Wed 13 May 2026 19:01:09 +0000 Files and hashes: 1: 1uEYEr4aUEIS5erchF-G3_love8.roa (hash: zNpv/vmV75AmB5KpVV8l8ngcfpgQVlAN2sGn4iX8/ng=) 2: 3w7QKsP-nBdjzBOchAjI61TTv2M.roa (hash: QyB/DzhD3cYZvTNAg8B4G4w4oEF1E2vw8LoHS76oVRY=) 3: 92brh40WW-h_KiNRuqIZRb5unjw.roa (hash: IJpD/Hxzhb2xZ5MqLyCbtsawZPipjgj8kAZiuASmDs4=) 4: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: TQLgrG06DD2TWHO6IsRpMiYi8f4IyDBpKf0IpDzy6q0=) 5: E33BupXnwP12_IF4jZwLlg0xD4w.roa (hash: 0NACigb3EWqFP6STcn//yzpEwV+siLe8SJdsoWQ96Y8=) 6: GEIKFkgfp6_eIqRvCuYJD-vtDrg.roa (hash: lwzwGD8UECsEevl2wRnqOwDSfVvfj8CLyePijoTaj1Q=) 7: HW_hkEfvkCc_Nbd1XrvVgG6W_mc.roa (hash: hJtEY+ViaHHrE6ovlwWbn8ahLz2qGrhOtEFfqEUoIIE=) 8: I0x4Z-Xx3L5jydy9aoZ7XgF5QNg.roa (hash: JlSlaBzAXyXquY82elhNPJ3+qyBoK5BR21f4eeFhqKI=) 9: IPeiMehm6QECFC52RY0apIXHDNU.roa (hash: 8ANVC/sDEWhLrwoJ9ZsQK2bdvdAuXXAuDwW/JPfEUMw=) 10: OY7VggLlS6S8taEQZwxA_9MJ9Jc.roa (hash: hj2ioa7d+yEki0gbVFILdu22LUXQHhfHdLKTOV3RU+k=) 11: W-LFdXJpQLdmO9rIYC8JOFXBGas.roa (hash: iUdq2UMzKZOkLskYtT6LwMXoPeIpp0LviydmXs6dcHA=) 12: hkJU0HHWf1-4JqWwATl5ZFWfJyc.roa (hash: VDA82OVX/X2yLRwyOfMgqYUT2szuVZcwdV7SJXAxuuQ=) 13: lTN9WM_3kAIwHlpaUspavss4Il0.roa (hash: HHix3BfeZ1Pqtr5dBucc6Su9pPLjQX4ABrsZY3uNeNA=) 14: nM0fT2qGFIY-E7YXz-VIDNKzo6g.roa (hash: 6H3JuqjFe5vPc22lKrJFxNe7X2kqJ2+u4oq5uX5FAp4=) 15: ppxL-JyBnLIGugzsw08md5QRsxg.roa (hash: +phpwkg3kcNrCj/VJvMVw3i6In/xr7LehwojIFYPMKg=) 16: r3qIFL64zBjpZJnS493yx0oryZk.roa (hash: 8MocfFSSFr7GFC7FeOm+9FTF4c9hg7BslJ3kzykAfTs=) 17: tJlaTHgStBVLlJKHBUxS_V9A-YY.roa (hash: ezIOIeTnDODny04gsbWcse31DfWyx6mg8AHZtHJ4iMk=) 18: wyfjlnYky-rnBOXT5ZHjb0J-F9I.roa (hash: XfYB9CaI2N46qtcZ6v9uIjhl1/e0d3UrGQvPezeGBLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 19:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:90:7f:b8:90:b4:0c:70:fd:ea:8f:e5:7c:29:8a:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: May 12 19:01:09 2026 GMT Not After : May 13 19:01:09 2026 GMT Subject: CN=ce59bb2af181fb31c8a9d2ccbc99f5bf5700201d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:65:77:ff:2a:ea:b8:ec:6e:f3:bc:7b:07:2d: 42:6f:cb:ab:e2:34:c0:1d:a2:d5:b2:8e:60:13:c0: 51:d5:0e:ba:f8:db:6f:70:b7:35:c3:1d:82:2e:97: 98:42:7a:09:e3:70:2f:50:35:cc:7b:97:25:4b:3b: 10:3b:5f:64:62:be:9e:10:a7:49:60:8a:c9:e0:85: 99:98:3d:0d:62:c8:fb:f0:34:7f:a6:e5:74:b6:00: aa:bf:7d:86:00:8a:af:a9:0c:83:2c:0e:55:78:c4: e6:86:c2:8b:16:a8:43:95:9c:bb:6b:a7:3b:d5:cf: bb:af:c1:5f:c9:66:1d:2b:52:80:ea:bc:10:64:a9: 44:03:6a:50:48:3f:ea:75:65:f4:3b:99:fd:cf:d7: 5e:f6:51:ad:09:71:42:9e:2b:b5:5f:05:d8:04:e3: 85:6d:99:59:c9:bb:69:69:8c:40:5d:a1:99:d8:f6: 7d:a6:ed:d0:69:9c:47:7b:93:dd:53:67:f7:5c:7e: 02:24:4b:db:b2:ab:7b:9a:c0:fa:31:4c:52:42:98: 97:fd:97:8d:2e:59:91:8b:80:22:9c:64:22:0b:98: 02:e2:90:d4:78:03:3c:a4:1d:53:d0:2b:eb:f2:2f: 3e:1c:0e:db:0d:80:1b:58:81:75:02:33:6b:09:d8: df:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:59:BB:2A:F1:81:FB:31:C8:A9:D2:CC:BC:99:F5:BF:57:00:20:1D X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:29:18:3c:62:2a:a7:a8:c7:ef:d1:63:0a:00:4e:16:73:10: da:c2:82:02:e8:f4:ba:6c:b5:cb:80:64:a1:83:ea:f7:36:65: d8:ad:27:e4:4c:36:45:2b:c9:9c:27:85:4e:0f:fe:91:c2:65: db:49:a0:c0:52:01:29:e6:e2:6a:7a:d4:e3:b3:7b:95:c2:8d: db:0e:9b:c4:a5:cb:1e:77:18:2e:86:b5:aa:a7:cc:2b:f6:30: 34:58:96:b8:9e:12:cb:7a:7c:39:fa:37:03:b9:82:24:2a:ed: 68:d5:fa:74:14:7f:28:55:d8:e0:26:f6:eb:ee:bf:b9:9a:e8: 6c:c5:c6:f2:e7:9b:fe:5a:f8:2f:0d:bb:bc:17:82:7d:29:77: 4a:46:b2:0d:4d:27:32:0b:98:08:3a:97:42:82:d1:d1:8d:17: 9e:db:a5:80:21:60:95:b9:57:08:a1:ac:69:da:db:ac:06:02: fa:7d:04:bb:aa:b6:65:64:c1:af:59:7e:f8:df:7d:57:fc:82: 88:ea:6d:8d:3c:0b:73:ee:79:a0:f3:35:9b:fe:1e:99:29:62: 1a:8a:4d:2b:b5:e3:f2:41:e2:24:be:7b:e5:37:a4:1c:a4:ef: 3b:c6:cb:e4:58:9a:00:f5:6b:4a:aa:36:a7:f4:18:25:bf:50: b4:80:e5:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dkH+4kLQMcP3qj+V8KYpkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjYwNTEyMTkwMTA5WhcNMjYwNTEzMTkwMTA5WjAzMTEwLwYDVQQD EyhjZTU5YmIyYWYxODFmYjMxYzhhOWQyY2NiYzk5ZjViZjU3MDAyMDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGV3/yrquOxu87x7By1Cb8ur4jTA HaLVso5gE8BR1Q66+NtvcLc1wx2CLpeYQnoJ43AvUDXMe5clSzsQO19kYr6eEKdJ YIrJ4IWZmD0NYsj78DR/puV0tgCqv32GAIqvqQyDLA5VeMTmhsKLFqhDlZy7a6c7 1c+7r8FfyWYdK1KA6rwQZKlEA2pQSD/qdWX0O5n9z9de9lGtCXFCniu1XwXYBOOF bZlZybtpaYxAXaGZ2PZ9pu3QaZxHe5PdU2f3XH4CJEvbsqt7msD6MUxSQpiX/ZeN LlmRi4AinGQiC5gC4pDUeAM8pB1T0Cvr8i8+HA7bDYAbWIF1AjNrCdjfGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5ZuyrxgfsxyKnSzLyZ9b9XACAdMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGCkYPGIq p6jH79FjCgBOFnMQ2sKCAuj0umy1y4BkoYPq9zZl2K0n5Ew2RSvJnCeFTg/+kcJl 20mgwFIBKebianrU47N7lcKN2w6bxKXLHncYLoa1qqfMK/YwNFiWuJ4Sy3p8Ofo3 A7mCJCrtaNX6dBR/KFXY4Cb26+6/uZrobMXG8ueb/lr4Lw27vBeCfSl3SkayDU0n MguYCDqXQoLR0Y0XntulgCFglblXCKGsadrbrAYC+n0Eu6q2ZWTBr1l++N99V/yC iOptjTwLc+55oPM1m/4emSliGopNK7Xj8kHiJL575TekHKTvO8bL5FiaAPVrSqo2 p/QYJb9QtIDlsA== -----END CERTIFICATE-----Generated at Wed May 13 05:09:23 2026 by rpki-client